More work to have OpenLDAP accept the full AD schema